Linux Distros Unpatched Vulnerability : CVE-2023-27599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, when the function appendhf handles a SIP message with a...

CVE-2023-27599

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, when the function appendhf handles a SIP message with a malformed To header, a call to the function abort is performed, resulting in a crash. This is due to the following check in datalump.c:39...

CVE-2023-27599

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, when the function appendhf handles a SIP message with a malformed To header, a call to the function abort is performed, resulting in a crash. This is due to the following check in datalump.c:39...

CVE-2023-27599

OpenSIPS vulnerability CVE-2023-27599 affects pre-3.1.7 and pre-3.2.4 releases. The issue arises when append_hf processes a SIP message with a malformed To header, triggering abort() via a faulty check in data_lump.c:399 (anchor_lump) and causing a crash that leads to Denial of Service. A fixed v...